CVE-2025-47419

Crestron Automate VX contains a vulnerability (CVE-2025-47419) where Web UI and API access over non-secure ports allows cleartext transmission of sensitive information, including passwords. Affected firmware ranges are 5.6.8161.21536 through 6.4.0.49. The issue originates from transmitting sensit...

CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a SUB ZeroMQ socket and connect to an XPUB socket on the primary vLLM host. When data ...

CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a SUB ZeroMQ socket and connect to an XPUB socket on the primary vLLM host. When data ...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

A flaw was found in Netty's SslHandler. This vulnerability allows a native crash via a specially crafted packet that bypasses proper validation...

CVE-2024-49835

Memory corruption while reading secure file...

CVE-2024-49835

Memory corruption while reading secure file...

CVE-2024-49835

CVE-2024-49835 is described as memory corruption while reading a secure file in Qualcomm closed‑source components. The CVSS v3.1 vector indicates a local, low‑privilege, low‑complexity attacker could trigger a high‑impact issue (C: High; I: High; A: High) with no user interaction. Several connect...

CVE-2024-49835 Out-of-bounds Write in SPS Applications

Memory corruption while reading secure file...

CVE-2024-49835 Out-of-bounds Write in SPS Applications

Memory corruption while reading secure file...

CVE-2024-45583 Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45583 Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

Optigo Networks ONS NC600

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to establish an authenticated connection with the hard-coded credentials and perform OS command executions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

PT-2025-19861 · Qualcomm · Snapdragon +184

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when reading a secure file. This corruption can happen due to improper handling of file data, leading to potential security risks...

PT-2025-19899

Name of the Vulnerable Software and Affected Versions vllm versions 0.5.2 through 0.8.5.post1 Description The issue exists in the V0 engine of vLLM, which uses ZeroMQ for multi-node communication. When data is received on the SUB ZeroMQ socket, it is deserialized with pickle, allowing for potenti...

EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1427)

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure...

EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1428)

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure...

Optigo Networks ONS NC600 信任管理问题漏洞

The Optigo Networks ONS NC600 is a professional building automation network controller from Optigo Networks designed as a security gateway for BACnet/IP and MS/TP networks. A trust management issue vulnerability exists in the Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, which...

LlamaFirewall: an Open Source Guardrail System for Building Secure AI Agents

Large language models LLMs have evolved from simple chatbots into autonomous agents capable of performing complex tasks such as editing production code, orchestrating workflows, and taking higher-stakes actions based on untrusted inputs like webpages and emails. These capabilities introduce new...

Crestron Automate VX 安全漏洞

Crestron Automate VX is an enterprise-grade intelligent space automation platform with integrated AV control, IoT device management, and data analytics from Crestron USA. A security vulnerability exists in Crestron Automate VX versions 5.6.8161.21536 through 6.4.0.49 that originates from the...